Auto protect is off

Posted on 2009-04-17
Last Modified: 2013-11-22
SEP 11.0.4 Windows 2000 clients are status: Auto-protect =off

How can I resolve this?
Question by:CohKarlHaskins
    LVL 1

    Author Comment

    I can remote to the clients and they can not be enabled
    LVL 16

    Expert Comment

    Has this been the case always? or has it just happened?

    Have you checked for viruses on the PC's?? It could be a worm or something that might be preventing the auto-protect from starting. I suggest either an online antivirus scan by Kaspersky online scanner based at: of the critical areas of one of the PC's in 'safe mode with networking'. That might give you a hint.

    Alternatively, you can install MalwareBytes Anti-malware ( on one of the PC's and update its definitions. Then reboot in safe mode and do a scan with that. See if it finds something.
    LVL 15

    Expert Comment


    1) Upgrade to the latest release MR4MP1a (11.0.4014) to get the latest bug fixes.

    2) When you open the SEP GUI, do you see any red warning with a written message? If yes, what does it say?

    3) Any error in the Windows event viewer?

    4) One reason behind auto protection is corrupt definitions. Download & run "Symantec Intelligent Updater" on some machines and see the results:

    OR go the download page:

    A Symantec Certified Specialist @ your service
    LVL 1

    Author Comment

    I'm in the process of deploying SEP 11.04.4014.26 to about 4000 clients. There are about 600 Windows 2000 Professional clients. The others are various flavors of Win XP Pro. I'm testing with random clients and have to test all Windows clients. These are the only ones I'm having problems with.

    On a side note we are also in a large scale process of refreshing all Win 2000 Pro clients. To Windows XP SP3.

    The Symantec Intelligent Updater appears to have resolved the issue. Now the fun question is why did this happen, and can I expect that all the Win2K clients will behave this way.

    I need an explanation for my higher up.
    LVL 1

    Accepted Solution

    Checked the Windows 2000 clients again this morning and they are back to disabled status. I'm going to call Symantec.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Enabling OSINT in Activity Based Intelligence

    Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

    As more computers now shipped with 64-bit version of Windows, more users are now using this Operating System.  So it's important to be aware how some 32-bit diagnostic tool works on these systems, so we know what to expect when analyzing the logs an…
    PREFACE The purpose of this guide is to provide information to successfully add specific IIS 7.0 role services for the Symantec Endpoint Protection Manager (SEPM) to function properly when installed on Windows 2008. AUDIENCE Information Technol…
    Sending a Secure fax is easy with eFax Corporate ( First, Just open a new email message.  In the To field, type your recipient's fax number You can even send a secure international fax — just include t…
    In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor ( If you're interested in additional methods for monitoring bandwidt…

    759 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    10 Experts available now in Live!

    Get 1:1 Help Now